cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
 
ISE 2.3 Patch 7 has been posted. This will be the last patch for the ISE 2.3 release!
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

144
Views
0
Helpful
4
Replies
Highlighted
Beginner

ISE to cross-check MAC address from SCCM to allow (temp) network access

Task is:

New native client data is entered into SCCM and client needs access to the network in order to download patches etc. until the 802.X1 certificate is installed, which is the prime network access condition.

ISE will detect an unknown MAC address without a certificate and should then connect to SCCM and cross-check the existence of the MAC address in order to allow access without a certificate. (may be even just for a limited period)

I presume it can be done with a script using the API?
Can not find any documentation how this could be done.

Hints are welcome

 

Everyone's tags (3)
1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: ISE to cross-check MAC address from SCCM to allow (temp) network access

Do you mean authenticating the endpoint from SCCM database? if yes, this is not supported 

Thanks,

Nidhi

4 REPLIES 4
Cisco Employee

Re: ISE to cross-check MAC address from SCCM to allow (temp) network access

Do you mean authenticating the endpoint from SCCM database? if yes, this is not supported 

Thanks,

Nidhi

Beginner

Re: ISE to cross-check MAC address from SCCM to allow (temp) network access

Yes, the idea was to cross-check the existence of the MAC in SCCM or even import client data e.g. MAC Address from SCCM.

I was hoping this would have been possible by now, since other data can be retrieved from SCCM

 

Beginner

Re: ISE to cross-check MAC address from SCCM to allow (temp) network access

Can you confirm that ISE can not at least import MAC adresses from SCCM ?

I thought this was implemented

Cisco Employee

Re: ISE to cross-check MAC address from SCCM to allow (temp) network access

Do you mean authenticating the endpoint from SCCM database? if yes, this is not supported 

Thanks,

Nidhi